Netgear FS728TLP – ProSAFE 24 ports smart switch PoE 사용자 가이드

The ports of an 802.1X authenticator smart switch can offer services to other systems that 
can be reached over the LAN. Port-based network access control allows you to control the 
ports of the smart switch to ensure that only systems that are authorized to access its 
services can do so.

Access control enforces authentication of supplicants that are attached to an authenticator’s 

controlled port. The result of the authentication process determines whether the supplicant is 
authorized to access services on that controlled port.

A port access entity (PAE) can adopt one of two distinct roles within an access control 

interaction:

Authenticator. A port that enforces authentication before allowing access to services 

available through that port.

Supplicant. A port that attempts to access services offered by the authenticator.

In addition, a third role exists:

Authentication server. A server that authenticates the supplicant on behalf of the 

authenticator.

All three roles are required for an authentication exchange to be completed.

The smart switch supports the authenticator role only, in which the PAE is responsible for 
communicating with the supplicant. The authenticator PAE also submits the information that it 
receives from the supplicant to the authentication server. Depending on the outcome of the 
RADIUS-based authentication process, the authenticator PAE sets the state of the port to 
authorized or unauthorized.

Supplicant

Supplicant

Authenticator

switch

Authentication

server (RADIUS)
192.168.10.23

This example shows how to configure the smart switch so that 802.1X-based authentication 
is required on ports e1 through e8 in a corporate conference room. These ports are available 
to visitors and must be authenticated before access to the network is granted. An external